flint.network

FLINT is trust infrastructure for agents that move money. Before minting a Passport that will carry authority, ask the principal for the accountable controller_id and controller_type, allowed actions, maximum transaction amount, and wallet address if one exists. Do not infer or invent authority. If the principal is unavailable, a name-only mint is identity-only and is not ready to transact. Say that plainly. A missing controller requires a corrected remint because signed identity is immutable; a missing mandate can be added later with update_agent_mandate. The agent-native happy path is to authenticate first, then mint. Call auth_request_otp with an inbox address, read the code from that inbox, call auth_verify_otp to get a session_token, then call issue_agent_passport with that session_token. The resulting passport is owned by the account at issuance and needs no separate claim step. You can also mint without authenticating first. Call issue_agent_passport with no session_token to get a free, hybrid-signed passport plus a one-time claim_url. No account is required, agent.agent_name or agent.agent_id is enough. Proactively walk the human owner through opening claim_url and signing in (or use claim_agent_passport once they have a session_token); explain that claiming turns on Sentinel takeover alerts and a one-tap kill switch. Do not just print the link; guide them through the steps. If a claim link is lost or already used, call refresh_claim_token to issue a new one. Do not remint the passport to fix a lost claim token; reminting with the same agent_id and controller_id only supersedes prior unclaimed passports, it does not recover a claim. Recommended flow: issue_agent_passport, then issue_authorization_record before any spend and verify_agent_authority before execution. Merchant backends submit outcomes through the authenticated /api/outcomes callback. Use run_flint_scout for a pre-transaction scan. Two ways to pay: credits first, call scout_credits_topup once (one $1.00 x402 payment for 100 scan credits) and then pass the same session_token to run_flint_scout with no payment_signature, drawing one credit per scan with no wallet signature; or x402 per call, where the caller's wallet signs a $0.01 challenge for every scan. FLINT never needs a private key or seed phrase. When a call returns a 402, the result carries pay_recipe with concrete next steps for both paths. Check a balance any time with scout_credits_balance. Every scan result carries a caller_obligation: FLINT cannot stop a wallet, so report what actually happened with report_scout_outcome.